Discuss Netskope NSK101 Exam Topic 3 Question 38

A company is attempting to steer traffic to Netskope using GRE tunnels. They notice that after the initial configuration, users cannot access external websites from their browsers.

What are three probable causes for this issue? (Choose three.)

AThe pre-shared key for the GRE tunnel is incorrect.

BThe configured GRE peer in the Netskope platform is incorrect.

CThe corporate firewall might be blocking GRE traffic.

DThe route map was applied to the wrong router interface.

ENetskope does not support GRE tunnels.

Suggested Answer: B, C, D

In this scenario, there are three probable causes for the issue of users not being able to access external websites from their browsers after attempting to steer traffic to Netskope using GRE tunnels. One cause is that the configured GRE peer in the Netskope platform is incorrect, which means that the Netskope POP that is supposed to receive the GRE traffic from the customer's network is not matching the IP address of the customer's router that is sending the GRE traffic. This will result in a failure to establish a GRE tunnel between the customer and Netskope. Another cause is that the corporate firewall might be blocking GRE traffic, which means that the firewall rules are not allowing the GRE protocol (IP protocol number 47) or the UDP port 4789 (for VXLAN encapsulation) to pass through. This will result in a failure to send or receive GRE packets between the customer and Netskope. A third cause is that the route map was applied to the wrong router interface, which means that the configuration that specifies which traffic should be steered to Netskope using GRE tunnels was not applied to the correct interface on the customer's router. This will result in a failure to steer the desired traffic to Netskope. The pre-shared key for the GRE tunnel is incorrect is not a probable cause for this issue, as GRE tunnels do not use pre-shared keys for authentication or encryption. Netskope does support GRE tunnels, so this is not a cause for this issue either.Reference:[Netskope Secure Forwarder],Netskope Security Cloud Operation & Administration (NSCO&A) - Classroom Course, Module 3: Steering Configuration, Lesson 3: Secure Forwarder.

Get Premium NSK101 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

33 comments · newest first

Wilda 10 months ago

Pre-shared key issues are common, good point!

Kirby 10 months ago

Wait, does Netskope even support GRE tunnels?

Alease 10 months ago

Totally agree, check the firewall too!

Van 10 months ago

GRE peer config might be off.

Brynn 10 months ago

Route map misconfig could definitely cause this.

Owen 11 months ago

I’m not convinced that Netskope doesn’t support GRE tunnels; I thought I read somewhere that they do. Maybe I should double-check that.

Ashley 11 months ago

What if the corporate firewall is blocking GRE traffic? I feel like that could be a common oversight in setups like this.

Ryan 11 months ago

I think the GRE peer configuration could be a factor too. We had a similar practice question where that was the issue.

Kimbery 11 months ago

I remember we discussed how an incorrect pre-shared key could definitely cause connectivity issues, but I'm not entirely sure if it's the main problem here.

Theodora 11 months ago

Netskope not supporting GRE tunnels? That seems unlikely, but I'll make sure to verify that as well, just to be thorough.

Trinidad 12 months ago

I'm feeling pretty confident about this one. The pre-shared key and the configured GRE peer are the first things I'd double-check, and the corporate firewall blocking GRE traffic is a common problem to watch out for.

Iluminada 12 months ago

I'm a bit confused by the route map part. I'll need to review my notes on that to make sure I understand how it could be causing the issue.

Barrett 12 months ago

Okay, let's see. The pre-shared key, the configured GRE peer, and the corporate firewall blocking GRE traffic all seem like reasonable possibilities to check.

Janessa 1 year ago

Hmm, this seems like a tricky one. I'll need to carefully consider the possible causes and make sure I don't miss anything.

Myra 1 year ago

Ah, the classic GRE tunnel conundrum. I bet they have the wrong flavor of Doritos on hand to solve this one.

Peggie 1 year ago

↳ replying to Myra

B: Maybe the configured GRE peer in Netskope is incorrect.

Lai 1 year ago

↳ replying to Myra

A: It could be the pre-shared key for the GRE tunnel.

Lottie 1 year ago

E? Really? Netskope not supporting GRE tunnels? That's just absurd. Someone's been living under a rock.

Josphine 1 year ago

↳ replying to Lottie

E) Netskope does not support GRE tunnels.

Alyssa 1 year ago

↳ replying to Lottie

C) The corporate firewall might be blocking GRE traffic.

Ivory 1 year ago

↳ replying to Lottie

A) The pre-shared key for the GRE tunnel is incorrect.

Lacey 1 year ago

I believe the corporate firewall blocking GRE traffic could be another possible cause.

Rashida 1 year ago

D sounds like the culprit to me. Route maps can be tricky, and it's easy to apply them to the wrong interface. Happens all the time.

Bettina 1 year ago

↳ replying to Rashida

D) The route map was applied to the wrong router interface.

Remedios 1 year ago

↳ replying to Rashida

C) The corporate firewall might be blocking GRE traffic.

Bev 1 year ago

↳ replying to Rashida

A) The pre-shared key for the GRE tunnel is incorrect.

Letha 1 year ago

I'm going with C - the corporate firewall is probably blocking the GRE traffic. That's always the first thing I check.

Karl 1 year ago

I agree with Noelia. The GRE peer in the Netskope platform might also be incorrect.

Leah 1 year ago

The pre-shared key is definitely the problem. I can't believe they'd mess that up. Rookie mistake!

Raul 1 year ago

↳ replying to Leah

D) The route map was applied to the wrong router interface.

Omega 1 year ago

↳ replying to Leah

C) The corporate firewall might be blocking GRE traffic.

Adolph 1 year ago

↳ replying to Leah

A) The pre-shared key for the GRE tunnel is incorrect.

Noelia 1 year ago

I think the pre-shared key for the GRE tunnel could be incorrect.

Netskope NSK101 Exam - Topic 3 Question 38 Discussion